Google has introduced several significant security enhancements for Android devices in 2024, building upon its ongoing efforts to combat increasingly sophisticated mobile threats. The new protections arrive amid a surge in phone-based scams and malware attacks, including the recent “ghost tapping” malware campaign that has targeted mobile banking users.
A notable addition in Android 16 Beta 2 is a security measure that prevents users from modifying sensitive settings during active phone calls. When users attempt to enable installations from unknown sources or grant accessibility permissions during calls, the system displays a warning message about potential scam attempts. The feature specifically targets fraudsters who attempt to manipulate users into changing security settings during phone conversations, a tactic that has become increasingly common in banking malware attacks like the recent FinStealer campaign.
The company has also launched Android SafetyCore, a system service that provides on-device classification capabilities without performing client-side scanning. The service, available on Android 9 and later versions including Android Go, helps detect malware, messaging spam, and phone scams while maintaining user privacy. SafetyCore operates only when specifically requested by applications through user-enabled features, supporting Google’s broader security initiatives that have already blocked 2.36 million malicious apps in 2024.
Security experts have outlined additional recommendations for Android device protection, emphasizing the importance of careful app permission management. Users are advised to verify application links through official sources and scrutinize app reviews before installation. The experts note that while accessibility settings remain a concern, even gallery access permissions now require careful consideration to prevent potential data theft. The recommendations come as Google has enhanced its biometric security measures, including the introduction of Identity Check for critical account settings.
Android 16 implements enhanced security measures against Intent redirection attacks, applying these protections by default regardless of an app’s target SDK version. While developers can opt out of these protections using the removeLaunchSecurityProtection() API, the action requires careful consideration of potential security implications, particularly in light of recent high-risk vulnerabilities identified across multiple Android versions.
Sources: The Hacker News, TWiT.tv
Follow Us